<?xml version="1.0" encoding="iso-8859-1" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="Content-Type" content=
    "application/xhtml+xml; charset=iso-8859-1" />
    <title>
      keyutils-1.6.1
    </title>
    <link rel="stylesheet" type="text/css" href="../stylesheets/lfs.css" />
    <meta name="generator" content="DocBook XSL Stylesheets V1.79.1" />
    <link rel="stylesheet" href="../stylesheets/lfs-print.css" type=
    "text/css" media="print" />
  </head>
  <body class="blfs" id="blfs-9.1">
    <div class="navheader">
      <h4>
        Beyond Linux<sup>�</sup> From Scratch <span class="phrase">(System
        V</span> Edition) - Version 9.1
      </h4>
      <h3>
        Chapter&nbsp;9.&nbsp;General Libraries
      </h3>
      <ul>
        <li class="prev">
          <a accesskey="p" href="json-glib.html" title=
          "JSON-GLib-1.4.4">Prev</a>
          <p>
            JSON-GLib-1.4.4
          </p>
        </li>
        <li class="next">
          <a accesskey="n" href="libaio.html" title="libaio-0.3.112">Next</a>
          <p>
            libaio-0.3.112
          </p>
        </li>
        <li class="up">
          <a accesskey="u" href="genlib.html" title=
          "Chapter&nbsp;9.&nbsp;General Libraries">Up</a>
        </li>
        <li class="home">
          <a accesskey="h" href="../index.html" title=
          "Beyond Linux� From Scratch     (System V Edition) - Version 9.1">Home</a>
        </li>
      </ul>
    </div>
    <div class="sect1" lang="en" xml:lang="en">
      <h1 class="sect1">
        <a id="keyutils" name="keyutils"></a>keyutils-1.6.1
      </h1>
      <div class="package" lang="en" xml:lang="en">
        <h2 class="sect2">
          Introduction to keyutils
        </h2>
        <p>
          Keyutils is a set of utilities for managing the key retention
          facility in the kernel, which can be used by filesystems, block
          devices and more to gain and retain the authorization and
          encryption keys required to perform secure operations.
        </p>
        <p>
          This package is known to build and work properly using an LFS-9.1
          platform.
        </p>
        <h3>
          Package Information
        </h3>
        <div class="itemizedlist">
          <ul class="compact">
            <li class="listitem">
              <p>
                Download (HTTP): <a class="ulink" href=
                "http://people.redhat.com/~dhowells/keyutils/keyutils-1.6.1.tar.bz2">
                http://people.redhat.com/~dhowells/keyutils/keyutils-1.6.1.tar.bz2</a>
              </p>
            </li>
            <li class="listitem">
              <p>
                Download MD5 sum: 919af7f33576816b423d537f8a8692e8
              </p>
            </li>
            <li class="listitem">
              <p>
                Download size: 96 KB
              </p>
            </li>
            <li class="listitem">
              <p>
                Estimated disk space required: 1.9 MB (with tests)
              </p>
            </li>
            <li class="listitem">
              <p>
                Estimated build time: less than 0.1 SBU (add 0.6 SBU for
                tests)
              </p>
            </li>
          </ul>
        </div>
        <h3>
          keyutils Dependencies
        </h3>
        <h4>
          Required
        </h4>
        <p class="required">
          <a class="xref" href="../postlfs/mitkrb.html" title=
          "MIT Kerberos V5-1.18">MIT Kerberos V5-1.18</a>
        </p>
        <p class="usernotes">
          User Notes: <a class="ulink" href=
          "http://wiki.linuxfromscratch.org/blfs/wiki/keyutils">http://wiki.linuxfromscratch.org/blfs/wiki/keyutils</a>
        </p>
      </div>
      <div class="installation" lang="en" xml:lang="en">
        <h2 class="sect2">
          Installation of keyutils
        </h2>
        <p>
          Install <span class="application">keyutils</span> by running the
          following commands:
        </p>
        <pre class="userinput">
<kbd class="command">make</kbd>
</pre>
        <p>
          To test the results, issue, as the <code class=
          "systemitem">root</code> user:
        </p>
        <pre class="root">
<kbd class="command">sed -i '/find/s:/usr/bin/::' tests/Makefile &amp;&amp;
make -k test </kbd>
</pre>
        <p>
          Note that several tests will fail if certain uncommon kernel
          options were not used when the kernel was built. These include
          CONFIG_BIG_KEYS, CONFIG_KEY_DH_OPERATIONS, and CONFIG_CRYPTO_DH.
        </p>
        <p>
          Now, as the <code class="systemitem">root</code> user:
        </p>
        <pre class="root">
<kbd class="command">make NO_ARLIB=1 install</kbd>
</pre>
      </div>
      <div class="commands" lang="en" xml:lang="en">
        <h2 class="sect2">
          Command Explanations
        </h2>
        <p>
          <em class="parameter"><code>NO_ARLIB=1</code></em>: This make flag
          disables installing the static library.
        </p>
      </div>
      <div class="configuration" lang="en" xml:lang="en">
        <h2 class="sect2">
          Configuring keyutils
        </h2>
        <div class="sect3" lang="en" xml:lang="en">
          <h3 class="sect3">
            <a id="keyutils-config" name="keyutils-config"></a>
          </h3>
          <h4 class="title">
            <a id="keyutils-config" name="keyutils-config"></a>Config Files
          </h4>
          <p>
            <code class="filename">/etc/request-key.conf</code> and
            <code class="filename">/etc/request-key.d/*</code>
          </p>
        </div>
      </div>
      <div class="content" lang="en" xml:lang="en">
        <h2 class="sect2">
          Contents
        </h2>
        <div class="segmentedlist">
          <div class="seglistitem">
            <div class="seg">
              <strong class="segtitle">Installed Programs:</strong>
              <span class="segbody">keyctl, key.dns_resolver, and
              request-key</span>
            </div>
            <div class="seg">
              <strong class="segtitle">Installed Library:</strong>
              <span class="segbody">libkeyutils.so</span>
            </div>
            <div class="seg">
              <strong class="segtitle">Installed Directory:</strong>
              <span class="segbody">/etc/request-key.d and
              /usr/share/keyutils</span>
            </div>
          </div>
        </div>
        <div class="variablelist">
          <h3>
            Short Descriptions
          </h3>
          <table border="0" class="variablelist">
            <colgroup>
              <col align="left" valign="top" />
              <col />
            </colgroup>
            <tbody>
              <tr>
                <td>
                  <p>
                    <a id="keyctl" name="keyctl"></a><span class=
                    "term"><span class=
                    "command"><strong>keyctl</strong></span></span>
                  </p>
                </td>
                <td>
                  <p>
                    is to control the key management facility in various ways
                    using a variety of subcommands.
                  </p>
                </td>
              </tr>
              <tr>
                <td>
                  <p>
                    <a id="key.dns_resolver" name=
                    "key.dns_resolver"></a><span class="term"><span class=
                    "command"><strong>key.dns_resolver</strong></span></span>
                  </p>
                </td>
                <td>
                  <p>
                    is invoked by <span class=
                    "command"><strong>request-key</strong></span> on behalf
                    of the kernel when kernel services (such as NFS, CIFS and
                    AFS) need to perform a hostname lookup and the kernel
                    does not have the key cached. It is not ordinarily
                    intended to be called directly.
                  </p>
                </td>
              </tr>
              <tr>
                <td>
                  <p>
                    <a id="request-key" name="request-key"></a><span class=
                    "term"><span class=
                    "command"><strong>request-key</strong></span></span>
                  </p>
                </td>
                <td>
                  <p>
                    is invoked by the kernel when the kernel is asked for a
                    key that it doesn't have immediately available. The
                    kernel creates a temporary key and then calls out to this
                    program to instantiate it. It is not intended to be
                    called directly.
                  </p>
                </td>
              </tr>
              <tr>
                <td>
                  <p>
                    <a id="libkeyutils" name="libkeyutils"></a><span class=
                    "term"><code class=
                    "filename">libkeyutils.so</code></span>
                  </p>
                </td>
                <td>
                  <p>
                    contains the keyutils library API instantiation.
                  </p>
                </td>
              </tr>
            </tbody>
          </table>
        </div>
      </div>
      <p class="updated">
        Last updated on 2020-02-17 13:54:09 -0800
      </p>
    </div>
    <div class="navfooter">
      <ul>
        <li class="prev">
          <a accesskey="p" href="json-glib.html" title=
          "JSON-GLib-1.4.4">Prev</a>
          <p>
            JSON-GLib-1.4.4
          </p>
        </li>
        <li class="next">
          <a accesskey="n" href="libaio.html" title="libaio-0.3.112">Next</a>
          <p>
            libaio-0.3.112
          </p>
        </li>
        <li class="up">
          <a accesskey="u" href="genlib.html" title=
          "Chapter&nbsp;9.&nbsp;General Libraries">Up</a>
        </li>
        <li class="home">
          <a accesskey="h" href="../index.html" title=
          "Beyond Linux� From Scratch     (System V Edition) - Version 9.1">Home</a>
        </li>
      </ul>
    </div>
  </body>
</html>
